When you use installable/desktop software you can also control network security and therefore application security via your firewalls and other devices. So the user is able to control secure access and contain any possible breeches...cheaply...instead of just pumping all their data to the cloud and hoping the SaaS provider knows what they are doing and has secured every single exploit and leak vector that comes with publishing a web-based solution.